642-618 試験問題を無料オンラインアクセス

Which statement about the Cisco ASA botnet traffic filter is true?

• A.The four threat levels are low, moderate, high, and very high.
• B.A static or dynamic blacklist entry always takes precedence over the static whitelist entry.
• C.By default, the dynamic-filter drop blacklist interface outside command drops traffic with a threat level of high or very high.
• D.Static blacklist entries always have a very high threat level.

When troubleshooting redundant interface operations on the Cisco ASA, which configuration should be verified?

• A.The IP address configuration on the logical redundant interface is correct.
• B.The name if configuration on the member physical interfaces are identical.
• C.The active interface is sending periodic hellos to the standby interface.
• D.The duplex and speed configuration on the logical redundant interface are correct.
• E.The MAC address configuration on the member physical interfaces are identical.

On the Cisco ASA, tcp-map can be applied to a traffic class using which MPF CLI configuration command?

• A.inspect
• B.parameters
• C.tcp-options
• D.sysopt connection
• E.set connection advanced-options

Which three Cisco ASA configuration commands are used to enable the Cisco ASA to log only the debug output to syslog? (Choose three.)

• A.logging trap debugging
• B.logging trap test
• C.logging list test message 711001
• D.logging debug-trace
• E.logging message 711001 level 7

Which Cisco ASA feature is implemented by the ip verify reverse-path interface interface_name command?

• A.IPS (IP audit)
• B.uRPF
• C.scanning threat detection
• D.TCP intercept
• E.botnet traffic filter